getting authorize flow twice